iblai-api-heygen
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the OpenAPI schema from the vendor's official API domain at
https://api.iblai.app/dm/api/docs/schema/for endpoint validation. This is a legitimate developer action involving vendor-controlled infrastructure. - [COMMAND_EXECUTION]: Several examples use standard CLI tools such as
curl,grep, andjqto interact with the API and parse JSON responses. These commands are used for their primary documented purposes and do not execute untrusted logic. - [INDIRECT_PROMPT_INJECTION]: As an API-focused skill, it handles data relayed from external HeyGen services. The documentation explicitly details the use of ownership gates and Role-Based Access Controls (RBAC) to mitigate risks of unauthorized resource access, resulting in a low risk profile for this category.
Audit Metadata